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NETWORK TUNNELLING 


This invention relates to the use of tunnelling 
techniques for routing data through portions of a network 
where the addresses of various network elements are not 
known at either the source or destination. 

A variety of tunnelling techniques are known and are 
commonly used in network technology. They mostly rely on 
adding additional routing information to a data packet when 
it is being routed through a network to disguise the 
eventual destination and, at some point, mapping of private 
and public IP addresses. 

Multi Protocol Label Switching MPLS has been developed 
to integrate OSI layer 2 information about network links 
such as bandwidth, latency and utilization into layer 3 (.IP) 
within a particular autonomous system or ISP in order to 
simplify and improve IP packet exchange. MPLS gives network 
operators flexibility to divert and route traffic around 
link failures, congestion and bottlenecks. 

When packets enter a MPLS based network, label edge 
routers (LERs) give the packet a label. These labels 
contain routing table entry information and refer to the IP 
header field, the source IP address, layer 4 socket number 
information, and differentiated service. Different packets 
are assigned to corresponding labelled switch paths (LSPs) 
where label switch routers (LSRs) place outgoing labels on 
the packets. Network operators can use these LSPs to divert 
and route traffic based on data-stream type and Internet- 
access customer. 

We have appreciated that MPLS may be used for 
tunnelling data through a network. Accordingly there is 
provided a method of sending data through an IP 
communications network from a first network point to a 
destination point, the method comprising the steps of 
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attaching at least one label to the data at the first 
network point based on the destination IP address of the 
data, the label including routing information through the IP 
network to the destination point determined by the network 
topology, and routing the data through the network to the 
destination point via a label switched path comprising the 
route included in the at least one label. 

The invention also provides a communications network 
including a first network point, a destination network 
point, and a plurality of intermediate network points, each 
of the first and destination network points including means 
for generating at least one label from the destination IP 
address of that data, means for attaching the at least one 
label to the data, and means for routing the data and at 
least one label to the other of the first and destination 
network points via a label switched path, the label switched 
path being determined by the network topology. 

Embodiments of the invention have the advantage that 
labels may be used to tunnel through networks. The labels 
determine the physical path through the networks rather than 
MAC addresses or IP address. 

Preferably labels may be used to send data packets 
through two or more networks. At the termination point of a 
label switched path that connects two networks the 
destination address can be extracted from a received label 
and a fresh label or set of labels generated to send the 
data packet through the further network via a further label 
switched path. 

A label switched path may be used for sending messages 
to a DHCP server. A DHCP discover message is sent via a 
label switched path. A public IP address is allocated by 
the server and sent back to the originator. A router 
forming the label tunnel endpoint uses the address to 
generate one or more labels to send the message back via a 
label switched path. 

The invention also provides a method of sending data 
through an IP communications network comprising a first 
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network point, a destination network point and a plurality 
of intermediate network points, the method comprising 
sending a message from the first network point to the 
destination network point to establish the network topology, 
mapping the network topology to network IP addresses at the 
destination point. 

The invention also provides a communications network 
comprising a first network point, a destination network 
point and a plurality of intermediate network points, the 
first network point including means for sending a message to 
the destination network point to establish the network 
topology, and the destination network point including means 
for mapping the network topology to network IP addresses . 

Embodiments of the invention will now be described, by 
way of example and with reference to the accompanying 
drawings, in which: 

Figure 1 shows how downstream tunnelling can be 
achieved using MPLS in an IP access network; 

Figure 2 shows how upstream tunnelling can be achieved 
in the network of Figure 1; 

Figure 3 shows an architecture to provide DHCP with 

MPLS; 

Figure 4 shows how MPLS labels can be generated 
automatically; 

Figure 5 shows downstream integration of MPLS tunnels; 
Figure 6 shows upstream integration of MPLS tunnels; 


and 


Figure 7 shows the allocation of a single MPLS label 
for explicitly downstream routing. 

Use of MPLS for tunnelling has a number of advantages, 
namely it can be used to determine the physical path through 
the network. Instead of using MAC or IP addresses to route 
packets, MPLS can be generated according to the destination 
of the packets. MPLS can also be used to identify the 
quality of service requirements of paths through the network 
and provide multiple paths through the access networks. 
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The use of WPLS will be described first by considering 
downstream and upstream tunnelling with reference, 
respectively, to Figures 1 and 2 . 

Figure 1 shows an access network 10 having a network 
terminator 18, a pair of concentrators 11 and an access 
network router 15. An explicitly routed LSP (label switched 
path) is used to tunnel downstream data through the network. 

The access router 15 keeps a map of IP addresses to MPLS 
labels. When a packet arrives at the access router, its IP 
address is examined. Three MPLS labels, Dl, D2 and D3 are 
inserted into the_ packet and the packet sent to the first 
stage concentrator 11a. The number ,of labels attached will 
be equal to the number of stages in the network through 
which the packet has to pass. In this case, there are three 
stages; access router to concentrator 11a; concentrator lib; 
and network terminator 18. 

The first stage concentrator examines the label on top 
of the stack Dl and uses it to route the packet, removing 
that label, Dl, from the label stack. Dl may contain the 
output port number on which the packet is to be transmitted. 
Label Dl is popped off the label stack and the packet 
forwarded to the second stage concentrator lib. Here a 
similar operation is performed, using label D2 and, 
according to the destination given by label D2 the packet, 
now only containing the original packet and label D3 is 
forwarded to the network terminator. At the NT 18, a 
similar operation is performed again, with the NT examining 
the remaining label D3 and routing the bare packet to the 
appropriate element in the network terminator depending upon 
the routing information contained in label D3 . This final 
destination is the tunnel endpoint. 

The MPLS labels can also be used to provide quality of 
service QoS management by using a part of the label to 
allocate a class to the traffic which controls the queueing 
algorithms used on concentration points. 

The embodiment has been described in terms of a label 
for each stage of the routing through the IP access network. 
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If the MPLS label is off sufficient length, a single label 
can carry routing and QoS information for more than one 
stage. This will be described later. 

Referring now to Figure 2, upstream routing of packets 
is more simple as they are all destined for the same point; 
the access router 15. Thus, a single label only is required 
and is used by all the stages. The label is not popped up 
by any of the stages but merely examined before the packet 
and label is passed on to the next stage. The label is only 
popped at the access network router. Again, the label, 
shown as U (upstream) in Figure 2 can also include QoS 
information, using different label values for different 
traffic classes. 

It will be appreciated from the discussion of Figure 1 
and 2 that the access network does not use IP addresses for 
internal routing of user packets. IP addresses are only 
used at the extremities of the access network where it has 
to communicate with external networks, for example at the 
access router 15 and the network terminator 18. Individual 
address domains may be used for each type of service offered 
by the NT, such as video, voice over IP and Internet access 
to simplify the provision of firewall security. 

Figure 3 illustrates how DHCP can be provided with MPLS 
tunnelling. Like components are shown with the same 
reference numerals as in previous examples. 

The host 12 will request an IP address by generating a 
DHCP discover message. The DHCP is used to discover the 
network topology. The DHCP message arrives at the MPLS 
tunnel entrance 22 in the network terminator 18. The 
request is sent along the upstream LSP to the access router 
15 in the manner described with respect to Figure 2. The 
access router here acts as the tunnel endpoint 24. The DHCP 
discover request will now be acted upon by the DHCP server 
26. The tunnel end point stores a map of the network 
topology. The DHCP server allocates an IP address and sends 
a public IP address offer back to the client using the 
determined network topology. Subsequent messages can then 
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have labels generated according to the IP address allocated. 

To enable this, the access server 15 sets up the necessary 
mapping from IP address to MPLS label and sends the messages 
along the downstream LSP back to the client in the manner 
described with respect to Figure 1. 

MPLS labels may be generated automatically. This will 
be described with reference to Figure 4. To begin with, a 
special MPLS label Ud is reserved for DHCP discover and 
request messages. The network terminator 18 detects the 
DCHP message as it is an IP Broadcast message. 

Broadcast messages are not normally forwarded by the 
network terminator. The NT inserts the MPLS label Ud and 
inserts the port number on which the request was received 
into a reserved field in the DHCP message. In the Figure 4 
example, this is 002 hex. The DHCP request is then 
forwarded on to the second concentrator stage lib. 

As each concentration stage receives the message it 
will recognise that the message is a DCHP request as the 
packet will carry the unique Ud label. The concentrator 
inserts the port number on which the request was received 
into some bits of the reserved field and passes the message 
on. in the present example it can be seen that the message 
is received at port three of concentrator 110 so the 
reserved field changes from 002 to 032. At the next 
concentrator the message is received at port 1 and so the 
reserved field changes to 132. 

When the DCHP message is received at the access router, 
acting as the tunnel endpoint, the reserved field will 
contain the port numbers on which the message was received 
at all the concentrator stages including the network 
terminator. The DHCP request is sent to the DHCP server 26 
and, when a response is received, the reserved field, which 
must be echoed by the DHCP server, can be used to generate 
MPLS routing labels for the downstream path from the access 
router 15 to the network terminator 18. 

One field which may be used as the reserved field is 
the chaddr field. If unicast DHCP renewals are used by 
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clients, the NT also has to detect such renewals as a 
special case in order that the correct MPLS label can be 
applied. 

So far, MPLS tunnels have been described purely within 
access networks. Access tunnels may be integrated with 
external MPLS tunnels as will be described with reference to 
Figures 5 and 6. The purpose of such integration is to 
enable the QoS attributes of the external tunnel to be 
maintained in the access network. 

Figure 5 illustrates how this may be achieved for 
downstream messages. Here there are two separate downstream 
tunnels, LSP1 and LSP2. In the first tunnel, a packet is 
sent from server 50 to the IP access network router 15. 
This packet has an attached label Li which includes quality 
of service management information. The access router 15 
terminates the tunnel LSP1 and pops the label Li extracting 
the QoS management information and the destination and 
generates labels Dl to D3, or whatever labels are required 
as discussed with respect to Figure 1. The QoS 

characteristics of tunnel LSP1 can be carried into these new 
labels so that the appropriate queues are used to forward 
the packets within the access network. 

In Figure 6, upstream tunnels are easily integrated by 
extracting the quality of service information specified in 
an upstream label U in the access network at the access 
network router 15 and inserting it into the label of the 
second tunnel LSP2 to maintain continuity. Thus the QoS 
characteristics of the tunnel LSP1 can be carried forward 
into the creation of labels for LSP2. 

It was mentioned earlier that downstream messages, 
which include several labels need not necessarily use a 
separate label for each stage. Figure 7 shows how a 20 bit 
Ethernet coded MPLS label could be allocated in a three 
stage access network. In Figure 7, the two concentrator 
stages 11a, lib are identified as street nodes and 
distribution nodes respectively. The access router is 
connected to 16 street nodes, each of which are connected to 
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32 distribution nodes, giving a total of 512 distribution 
nodes. The distribution nodes are each connected to 48 NTs; 
a total of 24576 NTs. Each of the NTs is connected to 8 
service points each of which can be provided with one of 
four levels of Q0S. The 20 bit MPLS label is therefore made 
up of 4 bits street node number, 5 bits street node port, 6 
bits distribution node port, 3 bits NT port and 2 bits QoS. 

Tradeoffs may be made in the bit allocations. For 
example, 32 street nodes each parenting 16 distribution 
nodes could be supported by allocating 5 bit to the street 
node number and four bits to the street node port number. At 
present, a two bit QoS is sufficient as only four levels of 
QoS are used: video, voice, LAN data and management but the 
above allocation allows for eight for future use. The 
number of service points may be reduced to four, using 2 
MPLS bits, and the number of QoS levels reduced to 2, using 
a single MPLS bit. This releases two further bits to allow, 
for example, 32 street nodes to support up to 64 
distribution nodes each. 

It will be appreciated that in each of the embodiments 
described, MPLS has been used in tunnelling techniques to 
send data through an access network which uses private 
internal addresses or public addresses. In each case, data 
can pass through the network without the need to know those 
private addresses. This has the advantage, for example of 
making it possible to construct access networks using 
private internal addresses so reducing the need to use 
scarce public IP addresses in such networks. Furthermore, 
by using MPLS labels, QoS information can be included at the 
same time. 

The description has been given purelt in relation to 
label generation. However, the use of DHCP discover 
messages to establish network topology has broader 
application. The network topology is mapped to IP addresses 
at the server. As well as being useful for generating 
labels, this data can be used for other purposes such as 
admission and access control. 
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Variations and modifications to the embodiments are 
possible and will occur to those skilled in the art. For 
example, MPLS may be used for tunnelling in other 
circumstances and the invention is not limited to public or 
private access networks. Such modifications are within the 
scope of the present invention. 
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P/63140.WOP 

Claims 


A method of sending data through an IP communications 
network from a first network point to a second network 
point, the method comprising the steps of attaching a 
single label to first data at the first network point, 
the label including information identifying a route 
through the IP network to the second network point 
determined by the network topology, and routing the 
first data through the network to the second network 
point via a label switched path comprising the route 
identified in the one label. 

A method according to claim 1 comprising the step of 
attaching a plurality of labels to second data at the • 
second network point the labels including information 
identifying a route through the IP network to the first 
network point determined by the network topology, and 
routing the second data through the network to the 
first network point via a label switched path 
comprising the route identified in the plurality of 
labels. 


3. A method according . to claim 2 in which the label 
switched path comprises a number of intermediate 
points, in which the method includes the step of 
removing one of the plurality of labels from the second 
data at each intermediate point of the network that the 
second data passes through and using it to route the 
second data. 

4. A method according to claims 1 to 3, in which the or 
each label is an MPLS label. 
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5. A method according to any of claims 1 to 4, in which 
the or each label includes quality of service 
information. 

6. A method according to any preceding claim, in which the 
first network point comprises a network terminator, and 
the network includes a client terminal attached to the 
network terminator and a DHCP server, comprising 
sending a DHCP discover message from the network 
terminator via a label switched path to the second 
network point, forwarding the DHCP discover message to 
the DHCP server via the label switched path, and 
allocating a public IP address to the client terminal 
originating the DHCP discover message. 

7. A method according to claim 5, in which the second 
network point comprises a router and the router maps 
the allocated public IP address of the client 
originator to at least one label. 

8. A method according to claim 6 or 7, in which the router 
sends a message from the DHCP server including the 
client IP address via a label switched path to the 
network terminator. 


9. 


A method according to claim 8, in which the network 
terminator receives the at least one label and forwards 
the message from the DHCP server to the client 
originator . 


10. A method according to claims 8 or 9, comprising 
inserting the port number on which the DHCP message is 
received at each stage of the label switched path into 
a reserved field within the message, and generating 
routing labels for routing of the message from the DHCP 
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server to the network terminator from the port'numbSs 
in the reserved field. 

11. A. method according to claim 10, in which the labels are 
generated at the router. 

12. A method according to any preceding claim, further 
comprising tunnelling the data from a third network 
point to the second network point inside a label 
switched path and, at the second network point, 
removing a label attached to the data received from the 
third network point and extracting the ultimate IP 
destination address therefrom, and generating a 
plurality of labels to enable the data to be sent to 
the first network point via a further label switched 
path. 


13. 


14. 


A method according to any preceding claim including 
at the second network point, removing the single label 
attached to the data received from the first network 
point and extracting the ultimate IP destination 
address therefrom, and generating one or more labels 
for attachment to the data for sending the data to the 
third network point via a further label switched path. 

A method according to claim 13 in which the single 
label comprises quality of service information from the 
first network point the method including the steps of 
extracting the quality of service information and using 
the extracted quality of service information in the 
generation of the one or more labels. 


15. A communications network comprising a first network 
point, a second network point, and a plurality of 
intermediate network points, in which the first network 
point comprises means for generating a label for 
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communication to the second network point, means for 
attaching the label to the first data, and means for 
routing the first data and the label to the second 
network point via a label switched path, the label 
switched path being determined by the network topology. 

16. A communications network according to claim 15 in which 
the second network point comprises means for generating 
a plurality of labels from" the destination IP address 
of second data, means for attaching the plurality of 
labels to the second data, and means for routing the 
second data and the plurality of labels to the first 
network point via a label switched path, the . label 
switched path being determined by the network topology. 

17- A communications network according to claim 16 in which 
the label switched path comprises a number of 
intermediate points, in which each intermediate point 
comprises means for removing one of the plurality of 
labels from the second data and using it to route the 
second data. 


18. A communications network according to claim 16 or 17, 
in which the second network point comprises means for 
attaching a label for each of the intermediate points 
and the destination first point to the second data. 

19. A communications network according to . any one of claims 
15 to 18, in which the or each label is an mpls label. 

20. A communications network according to any one of claims 
15 to 19 in which the or each label comprises quality 
of service- information. 

21. A communications network according to any of claims 15 
to 20, comprising a DHCP server, in which the first 
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network point comprises a network terminator' 6 inwhich 
the data compriees . a DHCP discover message from a 
client terminal connected to the network terminator to 
establish the topology of the network, in which the 
network terminator comprises means for forwarding the 
DHCP. discover message to the second network point via 
the label switched path, and in which the DHCP server 
comprises means for allocating a public IP address of 
the client terminal to the network topology. 

22. A communications network according to claim 21, in 
which the second point comprises a router and the means 
for generating a plurality of labels generates at least 
one label according to the IP address of the first 
network point, and means for sending a message to the 
network terminator from the DHCP server comprising the 
client public IP address via a label switched path. 

23. A communications network according to claim 22, in 
which the DHCP message comprises a reserved field and 
each intermediate point in the label switched path 
comprises means for inserting the port number on which 
the message was received into the reserved field. 


24. 


A communications network according to any of claims 15 
to 23, comprising a third network point, the third 
network point having means for generating labels to 
send data to the second network point via a label 
switched path, the second network point comprising 
means for removing a label from the data received from 
the third network point, for extracting the IP address 
of the message destination and for generating 
plurality of labels for attachment to the data for 
sending the data to the first network point via a 
further label switched path. 
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23. A cmrarrunications network according to claim 3 V^'^S 
which the second network point comprises means' for 
extracting quality of service information from the 
label removed from the data in which the plurality of 
labels generated at the second network point comprises 
the extracted quality of service information. 

26. A communications network according to any of claims 15 
to 25, in which the second network point comprises 
means for removing the single label attached to the 
data received from the first network point and 
extracting the ultimate IP destination address 
therefrom, and for generating one or more labels for 
attachment to the data for sending the data to a third 
network point via a further label switched path. 


27. 


A communications network according to claim 26 in which 
the second network point comprises means for extracting 
quality of service information from the label from the 
first network point in which the one or more labels 
generated at the second network point comprises the 
extracted quality of service information. 
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